CVE-2023-26735

blackbox_exporter v0.23.0 was discovered to contain an access control issue in its probe interface. This vulnerability allows attackers to detect intranet ports and services, as well as download resources. NOTE: this is disputed by third parties because authentication can be configured.

• CWE-918
• CWE-918

• https://github.com/prometheus/blackbox_exporter#tls-and-basic-authenticationProduct
• https://github.com/prometheus/blackbox_exporter/issues/1024Issue Tracking
• https://github.com/prometheus/blackbox_exporter/issues/1025Issue Tracking
• https://github.com/prometheus/blackbox_exporter/issues/1026Issue Tracking
• https://github.com/prometheus/blackbox_exporter#tls-and-basic-authenticationProduct
• https://github.com/prometheus/blackbox_exporter/issues/1024Issue Tracking
• https://github.com/prometheus/blackbox_exporter/issues/1025Issue Tracking
• https://github.com/prometheus/blackbox_exporter/issues/1026Issue Tracking
• https://github.com/prometheus/blackbox_exporter#tls-and-basic-authenticationProduct

Published

Apr 26, 2023

Last Modified

Jul 9, 2026

Status

Modified

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-26692ZCBS Zijper Collectie Beheer Systeem (ZCBS), Zijper Publicat…6.1
• CVE-2023-2670A vulnerability was found in SourceCodester Lost and Found I…8.8
• CVE-2023-2671A vulnerability was found in SourceCodester Lost and Found I…6.1
• CVE-2023-2672A vulnerability classified as critical has been found in Sou…9.8
• CVE-2023-2673Improper Input Validation vulnerability in PHOENIX CONTACT F…5.3
• CVE-2023-26733Buffer Overflow vulnerability found in tinyTIFF v.3.0 allows…7.8
• CVE-2023-2674Improper Access Control in GitHub repository openemr/openemr…4.3
• CVE-2023-2675Improper Restriction of Excessive Authentication Attempts in…9.8
• CVE-2023-26750SQL injection vulnerability found in Yii Framework Yii 2 Fra…9.8
• CVE-2023-26756The login page of Revive Adserver v5.4.1 is vulnerable to br…7.5
• CVE-2023-26758Sme.UP TOKYO V6R1M220406 was discovered to contain an arbitr…7.5
• CVE-2023-26759Sme.UP ERP TOKYO V6R1M220406 was discovered to contain an OS…8.8